What to do if I think I've been sent a false positive?

If you feel as though the Incident Report you have been sent for a false positive we've made it super easy to report to our Threat Ops Team. 

The first thing you need to do navigate to the incident you think is a false positive and select review remediation plan.

From there you will go ahead and select the "Reject" button in the bottom left hand corner

You will then need to provide a little contact information and some comments as to why you think this is a false positive and then finalize by hitting "Reject"

If you see the following message at the top of your incidents page then your rejection has been sent to the Threat Ops team for review!